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CLAIMS 

1. A method of establishing a secure communication link between a 

2 smart card and a central computer system through a communication network, 

the method comprising the steps of: 
4 demodulating an outgoing secure radio frequency signal transmitted 

from the smart card to produce an outgoing secure data signal; 
6 formatting the outgoing secure data signal in accordance with a 

communication network protocol to produce an outgoing formatted secure 
8 signal; and 

transmitting the outgoing formatted secure signal to the central 
1 0 computer system. 

2. A method in accordance with claim 1 further comprising the step of 
2 subjecting outgoing secure data contained within the outgoing secure radio 

frequency signal to a security function only at the smart card and at the 
4 central computer system. 

3. A method in accordance with claim 1, wherein the step of 

2 demodulating the outgoing secure radio frequency signal comprises the step 

of demodulating the outgoing secure radio frequency signal without 
4 deciphering the outgoing secure data signal. 

4. A method in accordance with claim 1 further comprising the steps of: 
2 reformatting, at the central computer system, the outgoing 

formatted secure signal to produce the outgoing secure data signal; and 
4 decoding, at the central computer system, the outgoing secure 

data signal to receive smart card information included within the outgoing 
6 secure data signal. 

5. A method in accordance with claim 4 further comprising the steps of: 
2 receiving an incoming secure formatted signal from the central 

computer system through the communication network, the incoming secure 
4 formatted signal formatted in accordance with the communication network 
protocol; 
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6 reformatting the incoming secure formatted signal to produce an 

incoming secure data signal; and 
8 transmitting an incoming secure radio frequency signal to the 

smart card, wherein the incoming secure radio frequency signal is modulated 
1 0 in accordance with the incoming secure data signal. 

6. A method in accordance with claim 5 further comprising the steps of: 
2 demodulating the incoming secure radio frequency signal within 

the smart card to produce the incoming secure data signal; and 
4 decoding the incoming secure data signal to receive central 

computer information included within the incoming secure data signal. 

7. A method in accordance with claim 6 wherein the step of decoding 

2 the outgoing secure data signal comprises the step of implementing a security 

function using a security device coupled to the central computer system to 
4 decode the outgoing secure data signal. 

8. A method in accordance with claim 7 further comprising the step of 
2 encoding outgoing data within the smart card using a security function to 

produce the outgoing secure data signal. 

9. A method in accordance with claim 8 wherein the step of encoding 
2 further comprises the steps of : 

generating a message authentication code at the smart card; 

4 and 

appending the message authentication code to the outgoing 

6 data. 

10. A method in accordance with claim 9, wherein the step of decoding 
2 comprises the step of observing a characteristic of the outgoing data in 

accordance with the message authentication code. 

1 1 . A method in accordance with claim 1 0, wherein the step of 
2 observing comprises the step of: 

generating the message authentication code at the central computer 
4 system; and 
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comparing the secure outgoing data signal to the message 
6 authentication code to detect an unauthorized modification of the outgoing 
data. 

12. A method in accordance with claim 10 wherein the step of 

2 decoding the incoming secure data signal comprises the step of decoding the 
incoming secure data signal within the smart card using a security function. 

13. A method in accordance with claim 7 further comprising the step of 
2 encoding incoming data within the central computer system using a security 

function to produce the incoming secure data signal. 

14. A method in accordance with claim 13 wherein the step of 
2 encoding further comprises the steps of : 

generating a message authentication code at the central 
4 computer system; and 

appending the message authentication code to the incoming 

6 data. 



15. A method in accordance with claim 14, wherein the step of 

2 decoding comprises the step of observing a characteristic of the incoming in 
accordance with the message authentication code. 

16. A method in accordance with claim 15, wherein the step of 
2 observing comprises the step of: 

generating the message authentication code at the smart card; and 
4 comparing the secure incoming data signal to the message 

authentication code to detect an unauthorized modification of the incoming 
6 data. 



17. A method of establishing a secure communication link between a 
2 smart card and a central computer system through a communication network, 

the method comprising the steps of: 
4 encoding smart card information within the smart card using a 

security function to produce an outgoing secure data signal; 
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6 transmitting an outgoing secure radio frequency signal including 

the outgoing secure data signal to a smart card communication device; 
8 demodulating an outgoing secure radio frequency signal at the 

smart card communication device to produce the outgoing secure data signal; 
1 0 formatting the outgoing secure data signal in accordance with a 

communication network protocol to produce an outgoing formatted secure 
1 2 signal; 

transmitting the outgoing formatted secure signal to the central 
1 4 computer system through a communication network; 

reformatting the outgoing formatted secure signal to produce the 
1 6 outgoing secure data signal; and 

decoding, using a security device coupled to the central 
1 8 computer system, the outgoing secure data signal to receive the smart card 
information; 

20 encoding central computer system information using the security 

device to produce an incoming secure data signal; 
22 formatting the incoming secure data signal to produce an 

incoming secure formatted signal; 
24 receiving the incoming secure formatted signal from the central 

computer system through the communication network, the incoming secure 
26 formatted signal formatted in accordance with the communication network 

protocol; 

28 reformatting the incoming secure formatted signal to produce 

the incoming secure data signal; and 
30 transmitting an incoming secure radio frequency signal to the 

smart card, wherein the incoming secure radio frequency signal is modulated 
32 in accordance with the incoming secure data signal; 

demodulating the incoming secure radio frequency signal within 
34 the smart card to produce the incoming secure data signal; and 

decoding the incoming secure data signal using a security 
36 function to receive the central computer information at the smart card. 

18. A method of establishing a secure communication link between a 
2 smart card and a central computer system remotely located from the smart 
card, the method comprising the steps of: 
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4 exchanging secure data through a radio frequency 

communication channel with the smart card; 
6 exchanging the secure data through a communication network 

with the central computer system; and 
8 performing a security function on the data at the central 

computer system. 

19. A method in accordance with claim 18, further comprising the step 
2 of performing a security function on the at the smart card. 

20. A method in accordance with claim 18 wherein the step of 

2 exchanging the secure data through the communication network comprises 
the steps of: 

4 formatting secure data in accordance with a communication 

network protocol; 

6 transmitting the secure data through the communication 

network; 

8 and reformatting the secure data. 

21. A method of establishing a secure communication link between a 
2 smart card and a central computer system remotely located from the smart 

card, the method comprising the steps of: 
4 downloading communication link interface software to a 

processor from a remote computer system; 
6 exchanging secure data between the smart card and a smart 

card communication device through a radio frequency communication 
8 channel; and 

exchanging the secure data between the smart card 
1 0 communication device and the central computer system through the 

processor running the downloaded communication link interface software, 
1 2 wherein the processor is coupled to the central computer system through a 

communication network. 

22. A method of establishing a secure communication link between a 
2 smart card and a central computer system remotely located from the smart 

card, the method comprising the steps of: 
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4 exchanging secure data with a smart card communication 

device through a baseband data channel, wherein the secure data 
6 corresponds to secure data exchanged between the smart card 

communication device and the smart card through a radio frequency channel, 
8 formatting the secure data in accordance with a communication 

network protocol; and 
1 0 exchanging the secure data with the central computer system 

through a communication network. 

23. A method in accordance with claim 22 wherein the secure data is 
2 not deciphered within the communication link. 

24. A method in accordance with claim 22 further comprising the step 
2 of subjecting the secure data to a security function only at the smart card and 

at the central computer system. 

25. A smart card communication system for establishing a secure 

2 communication link between a smart card and a central computer system, the 

smart card communication system comprising: 
4 a smart card communication device comprising a radio 

frequency transceiver adapted to exchange secure data with the smart card 
6 through a radio frequency communication channel and a data communication 

interface; 

8 a processor coupled to the smart card communication device, 

the processor adapted to exchange the secure data with the data 
1 0 communication interface through a baseband data channel; 

a communication network coupled to the processor and adapted 
1 2 to exchange the secure data in accordance with a communication network 

protocol between the processor and the central computer system; and 
1 4 a security device coupled to the central computer system. 

26. A system in accordance with claim 25 wherein the communication 
2 network is an Internet network and the communication network protocol is an 

Internet protocol. 
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27. A system in accordance with claim 25 further comprising a smart 
2 card adapted to subject outgoing data to a security function to produce a 

secure outgoing data signal. 

28. A system in accordance with claim 25 further comprising a smart 

2 card adapted to subject a secure incoming data signal to a security function to 
produce deciphered incoming data. 

29. A smart card communication device for interfacing within a smart 
2 card communication system having a local processor coupled to a remotely 

located central computer system through a communication network, the smart 
4 card communication device comprising: 

a radio frequency transceiver adapted to exchange secure data 
6 with a smart card through a radio frequency communication channel; 

a data communication interface adapted to exchange the secure 
8 data with the processor through a baseband data communication channel 
without deciphering the secure data. 

30. A device in accordance with claim 29 wherein the transceiver 
2 comprises: 

a receiver adapted to receiving a secure outgoing radio 
4 frequency signal from a smart card to produce a secure outgoing data signal, 

the data communication interface adapted to send the outgoing data signal 
6 through the baseband data channel in a secure state. 



31. A device in accordance with claim 30 wherein the receiver 

2 comprises a demodulator adapted to demodulate the secure outgoing radio 
frequency signal to produce the secure outgoing data signal, the secure 

4 outgoing data signal comprising a plurality of logic highs and a plurality of 
logic lows corresponding to an intelligible message only when subjected to a 

6 security function. 

32. A device in accordance with claim 30 wherein the receiver 

2 comprises a demodulator adapted to demodulate the secure outgoing radio 
frequency signal to produce the secure outgoing data signal, the secure 
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\ outgoing data signal comprising a plurality of logic highs and a plurality of 

logic lows corresponding to a verifiable authentic message only when 
3 subjected to a security function. 

33. A device in accordance with claim 29 wherein the transceiver 
2 comprises a transmitter adapted to transmit a secure incoming radio 

frequency signal to the smart card, the secure incoming radio frequency 
\ signal based on a secure incoming data signal received by the data 
communication interface. 

34. A device in accordance with claim 33, wherein the transmitter 

2 comprises a modulator adapted to modulate the secure incoming data signal 
to produce the secure incoming radio frequency signal, the secure incoming 

X data signal comprising a plurality of logic highs and plurality of logic lows 
corresponding to an intelligible message when subjected to a security 

3 function. 

35. A device in accordance with claim 33, wherein the transmitter 

2 comprises a modulator adapted to modulate the secure incoming data signal 
to produce the secure incoming radio frequency signal, the secure incoming 

% data signal comprising a plurality of logic highs and plurality of logic lows 
corresponding to a verifiable authentic message only when subjected to a 

3 security function. 

36. A method of providing access to data stored on a smart card, the 
2 method comprising the steps of: 

providing a transaction form Web page at a local processor; and 
^ 4 performing a transaction in accordance with information 

submitted by the customer in the transaction form Web page. 

37. A method in accordance with claim 36 wherein the step of 
I providing is performed by a remote central computer system coupled to the 

local processor through a network. 
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38. A method in accordance with claim 37 wherein the step of 

2 performing the transaction is performed by the remote central computer 
system. 

39. A method in accordance with claim 38 wherein the information 

2 submitted by the customer in the transaction form Web page includes credit 
card information. 

40. A method in accordance with claim 39 wherein the credit card 

2 information submitted by the customer in the transaction form Web page is 
verified for availability of funds by the central computer system. 

41. A method of establishing a communication link between a smart 
2 card and a central computer system, the method comprising the steps of: 

applying an authentication function to data at the smart card and 
4 the central computer system; and 

exchanging the data through a communication network between 
6 the smart card and the central computer system. 

42. A method in accordance with claim 41 further comprising the step 
2 of detecting an unauthorized modification to the data. 

43. A method in accordance with claim 42 wherein the unauthorized 
2 modification to the data is an intentional fraudulent modification. 

44. A method in accordance with claim 40 wherein the unauthorized 
2 modification to the data is due to an error in transmission through the 

communication network. 

45. A method in accordance with claim 41, wherein the step of 
2 applying the authentication function comprises the steps of: 

transmitting the data from the smart card with a message 
4 authentication code generated at the smart card; 

generating the message authentication code at the central 
6 computer system; and 
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verifying the data at the central computer system using the 
8 message authentication code. 

46. A method in accordance with claim 41, wherein the step of 
2 applying the authentication function comprises the steps of: 

transmitting the data from the central computer system with a 
4 message authentication code generated at the central computer system; and 
generating the message authentication code at the smart card; 

6 and 

verifying the data at the smart card using the message 
8 authentication code. 

47. A method in accordance with claim 41, further comprising the step 
2 of downloading, at a local processor coupled between the smart card and the 

communication network, a temporary software application to facilitate the 
4 exchange of data through the network. 

48. A method in accordance with claim 47, wherein the step of 
2 downloading comprises the step of downloading a Java applet. 

49. A method of establishing a communication link between a smart 
2 card and a central computer through a communication network, the method 

comprising the step of: 
4 downloading a temporary software application to a local 

processor coupled between the smart card and the communication network; 
6 executing the temporary software application on the local 

processor to exchange data between the smart card and the central computer 
8 system. 

50. A smart card communication system comprising: 
2 a smart card; 

a central computer system: 
4 a communication network coupled between the smart card and 

the central computer system; 
6 a local processor coupled to the smart card and the 

communication network, the local processor adapted to execute a temporary 
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8 software application downloaded through the network to establish a 

communication link between the smart card and the central computer system 

51. A smart card communication system in accordance with claim 50, 
2 wherein the temporary software application is a Java applet. 

52. A smart card communication system in accordance with claim 50 
2 further comprising a smart card communication device coupled to the smart 

card through a first channel and coupled to the local processor through a 
4 second channel, the smart card communication device exchanging data 
between the smart card and the local processor. 

53. A system in accordance with claim 52, wherein the first channel is 
2 a radio frequency channel; and wherein the second channel is baseband data 

channel. 

54. A smart card communication system comprising: 

2 a communication network coupled between a smart card and 

the central computer system; 
4 the smart card comprising a first security device adapted to 

generate a message authentication code to authenticate data exchanged 
6 between the smart card and the central computer system; 

the central computer system comprising a second security 
8 device adapted to generate the message authentication code to authenticate 
the data, the data maintained in an authenticated state between the smart 
1 0 card and the central computer system. 

55. A smart card communication system in accordance with claim 54 
2 wherein the smart card is adapted to authenticate outgoing data by 

appending a message authentication code generated by the first security 
4 device to the outgoing data. 

56. A smart card communication system in accordance with claim 55 
2 wherein the central computer system is adapted to authenticate the outgoing 

data by detecting an absence of an unauthorized modification of the incoming 
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4 data based on the message authentication code, the message authentication 
code generated by the second security device. 

57. A smart card communication system in accordance with claim 54 
2 wherein the central computer is adapted to authenticate incoming data for 

transmission to the smart card by appending a message authentication code 
4 generated by the second security device to the incoming data. 

58. A smart card communication system in accordance with claim 57 
2 wherein the smart card is adapted to authenticate an incoming data of an 

incoming data signal transmitted by the central computer system by detecting 
4 an absence of an unauthorized modification of the incoming data based on 

the message authentication code, the message authentication code 
6 generated by the first security device. 



